Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/4c1ec15d700a0511abbdad1d133dfedd6fb5f411.roa
File: 4c1ec15d700a0511abbdad1d133dfedd6fb5f411.roa (raw, json)
Hash identifier: 8s3f0OHNiiGysNBKrboHftbs90Wc60F0UqCoKCIP8Gc=
Subject key identifier: 57:23:92:95:C0:DF:63:9E:03:EC:FD:DF:03:6A:2E:14:3D:D2:1F:6D
Certificate issuer: /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial: 04FC3D
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/4c1ec15d700a0511abbdad1d133dfedd6fb5f411.roa
Signing time: Mon 25 Apr 2022 22:27:49 +0000
ROA not before: Sun 24 Apr 2022 03:00:00 +0000
ROA not after: Fri 31 Jan 2025 03:00:00 +0000
asID: 23059
IP address blocks: 2801:114:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Feb 2024 03:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326717 (0x4fc3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Validity
Not Before: Apr 24 03:00:00 2022 GMT
Not After : Jan 31 03:00:00 2025 GMT
Subject: CN=4c1ec15d700a0511abbdad1d133dfedd6fb5f411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:1b:2f:f0:4d:9d:a8:28:39:a2:d1:a0:55:
8f:e9:5f:56:0b:4b:58:f5:24:5f:73:98:98:45:f5:
26:1b:af:7a:99:89:22:e4:09:48:1c:66:0f:78:c7:
f1:f3:20:47:53:5c:5e:0d:38:c4:64:a8:d7:09:13:
e4:00:1f:64:a2:f6:f4:58:bb:0b:b7:33:59:7c:22:
b8:2b:f7:8c:0a:2d:95:a4:09:4a:42:7f:eb:41:09:
a9:86:67:4a:da:8e:43:b8:46:7d:2b:23:df:e4:51:
76:75:28:27:63:ac:ad:47:23:90:4e:74:0a:10:73:
43:fa:1c:1d:b1:e0:53:45:74:54:15:47:f4:25:46:
5c:80:20:13:03:d0:64:63:ac:b2:c4:ed:b3:1f:1b:
b2:96:26:4c:68:1b:03:15:44:f2:9e:84:e4:83:72:
2b:76:8b:91:47:1b:62:b6:14:1e:1d:f2:12:1c:60:
03:e8:a8:40:f3:86:21:b2:6f:8e:8d:a2:db:68:68:
49:c4:a2:f9:f6:92:79:bf:a7:0b:73:5f:95:0f:c5:
57:da:01:38:10:20:1c:48:39:fc:03:fc:ce:f2:f0:
2b:66:d3:2e:9e:b3:4b:be:0a:8a:85:c2:26:a2:e6:
2c:e5:ea:e7:6c:86:ee:33:af:12:7e:f7:de:c0:cc:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:23:92:95:C0:DF:63:9E:03:EC:FD:DF:03:6A:2E:14:3D:D2:1F:6D
X509v3 Authority Key Identifier:
keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/4c1ec15d700a0511abbdad1d133dfedd6fb5f411.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:114:3::/48
Signature Algorithm: sha256WithRSAEncryption
51:8e:52:d5:23:bc:46:80:13:f6:46:cf:8e:97:10:b2:6b:7a:
1f:08:32:17:35:65:70:72:c2:1a:50:7b:bf:99:eb:97:39:37:
3a:54:85:64:68:26:c5:47:cc:a4:f6:ec:17:6d:7f:da:8b:33:
55:84:12:18:35:3d:b5:59:11:ec:ad:f4:7e:bb:60:62:f9:06:
da:dd:ee:11:20:d2:a9:5e:10:cd:05:73:c9:25:17:88:38:4e:
28:3b:7c:6a:4c:30:5c:06:2e:f2:43:dd:eb:29:e3:4b:c7:3c:
86:a6:6a:2b:c6:36:e2:0c:69:93:27:04:26:f5:63:b5:27:45:
38:6e:f9:89:22:e5:6e:ad:87:0e:1e:51:77:fd:4b:95:d2:28:
86:cb:2f:ef:79:4d:fe:8b:57:21:74:80:00:cc:ba:da:b4:0f:
fe:9b:36:ee:a3:ba:34:ba:23:b5:63:a2:bd:56:80:be:83:ca:
86:29:8c:a7:81:22:87:c3:1b:a0:28:a5:3c:b9:2c:a1:74:1c:
dc:03:32:28:66:fa:bc:bb:df:0e:d1:37:cb:2d:4e:0a:f4:61:
98:0b:c5:fe:e2:7b:83:c0:c6:b7:cf:12:f0:c6:ef:81:ea:c4:
a4:bf:b2:4a:fc:f7:a5:a3:83:eb:d6:90:c2:c4:63:aa:72:e7:
9c:73:8f:3c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBPw9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
NGFhZjlkNzBjMjE2NTUxYjFiNjE5YmM0Yzg1NzNjM2IzZTFiNTIwHhcNMjIwNDI0
MDMwMDAwWhcNMjUwMTMxMDMwMDAwWjAzMTEwLwYDVQQDEyg0YzFlYzE1ZDcwMGEw
NTExYWJiZGFkMWQxMzNkZmVkZDZmYjVmNDExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxiMbL/BNnagoOaLRoFWP6V9WC0tY9SRfc5iYRfUmG696mYki
5AlIHGYPeMfx8yBHU1xeDTjEZKjXCRPkAB9kovb0WLsLtzNZfCK4K/eMCi2VpAlK
Qn/rQQmphmdK2o5DuEZ9KyPf5FF2dSgnY6ytRyOQTnQKEHND+hwdseBTRXRUFUf0
JUZcgCATA9BkY6yyxO2zHxuyliZMaBsDFUTynoTkg3IrdouRRxtithQeHfISHGAD
6KhA84Yhsm+OjaLbaGhJxKL59pJ5v6cLc1+VD8VX2gE4ECAcSDn8A/zO8vArZtMu
nrNLvgqKhcImouYs5ernbIbuM68SfvfewMy9PwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFFcjkpXA32OeA+z93wNqLhQ90h9tMB8GA1UdIwQYMBaAFISm8Fb2MnQz/0/c
UNnzstjFz/6bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY0YWFm
OWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2VhZmY4OWEtODU3YS00ODcwLTgxMmMtN2E1NzRk
ZTE2YjI2LzRjMWVjMTVkNzAwYTA1MTFhYmJkYWQxZDEzM2RmZWRkNmZiNWY0MTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZWFmZjg5YS04NTdhLTQ4NzAtODEyYy03YTU3
NGRlMTZiMjYvNDY0YWFmOWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBARQAAzANBgkqhkiG9w0BAQsFAAOCAQEAUY5S1SO8RoAT
9kbPjpcQsmt6HwgyFzVlcHLCGlB7v5nrlzk3OlSFZGgmxUfMpPbsF21/2oszVYQS
GDU9tVkR7K30frtgYvkG2t3uESDSqV4QzQVzySUXiDhOKDt8akwwXAYu8kPd6ynj
S8c8hqZqK8Y24gxpkycEJvVjtSdFOG75iSLlbq2HDh5Rd/1LldIohssv73lN/otX
IXSAAMy62rQP/ps27qO6NLojtWOivVaAvoPKhimMp4Eih8MboCilPLksoXQc3AMy
KGb6vLvfDtE3yy1OCvRhmAvF/uJ7g8DGt88S8MbvgerEpL+ySvz3paOD69aQwsRj
qnLnnHOPPA==
-----END CERTIFICATE-----
Generated at Fri Feb 2 04:32:57 2024 by rpki-client on console-fra.rpki-client.org